We claim: 

1 . A computer implemented method of processing an online transaction, the method 
comprising: 

generating from an online transaction of a purchaser, a plurality of keys from key fields 
of the transaction that individually do not reliably identify the purchaser; 

for each key, retrieving a profile of historical transactions associated with the key; 

weighting each profile with a weight indicating a degree to which the profile is associated 
with current purchaser; and 

generating a fraud score indicative of the likelihood of fraud in the online transaction as a 
function of the weighted profiles and the current transaction. 

2. The method of claim 1, wherein the key fields of the online transaction includes fields 
associated with any of purchaser identification information, order information, and payment 
information. 

3. The method of claim 1, wherein each profile for a key includes a plurality of summary 
variables derived from the associated historical transactions, and which summarize the historical 
transactions having the key in a key field of the historical transactions. 

4. The method of claim 1, further comprising: 

using the fraud score to determine whether obtain additional information prior to 
completing the transaction. 

5. The method of claim 4, further comprising: 

responsive to determining to obtain additional information, presenting a form with 
questions selected to obtain the additional information from the purchaser. 
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6. The method of claim 1 ? further comprising: 

using the fraud score to determine whether hold the transaction for further review by a 
human analyst. 

7. The method of claim 6, further comprising: 

responsive to determining to hold the transaction for further review, outsorting the 
transaction to a file for review by human analyst to determine whether to decline or 
approve the transaction, or obtain additional information prior to completing the 
transaction. 

8. The method of claim 1, further comprising: 

using the fraud score to determine whether to approve the transaction or decline the 
transaction. 

9. The method of claim 8, further comprising: 

responsive to determining to approve the transaction, completing the transaction order 
and fulfilling payment instructions for the order. 

10. The method of claim 8, further comprising: 

responsive to determining to decline the transaction, transmitting a signal indicating that 
the transaction is declined. 

1 1 . The method of claim 8, wherein using the fraud score to determine whether to 
approve the transaction or decline the transaction further comprises: 

applying a plurality of rules to the fraud score and to the transaction. 
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12. The method of claim 8, wherein using the fraud score to determine whether to 
approve the transaction or decline the transaction further comprises: 

storing velocity data based on an attribute of the transaction, the velocity data measuring 

a frequency of the attribute in a plurality of transactions; and 
applying a velocity rule to the velocity data. 

13. The method of claim 8, wherein using the fraud score to determine whether to 
approve the transaction or decline the transaction further comprises: 

declining the transaction if the fraud score is below a cutoff score, wherein the cutoff 
score is a function of a net margin of a merchant receiving the transaction. 

14. The method of claim 8, wherein using the fraud score to determine whether to 
approve the transaction or decline the transaction further comprises: 

for each of a plurality of different product categories, defining a different cutoff score; 
and 

responsive to the product category pertaining to the transaction, applying the cutoff score 
for the product category to the fraud score. 

15. A method of developing a statistical model of online transactions, the method 
comprising: 

storing from a plurality of different online merchants, transactions for a plurality of 

different purchasers, each transaction indicated as being fraudulent or non-fraudulent; 

for each of a plurality of key fields of the transaction, including at least one key field for 
which all of the possible keys of the key field do not reliably identify a purchaser of 
the transaction, generating for each key of the key field, a profile for all of the 
transactions having a matching key for the key field, such that at least one profile 
summarizes the transactions of a plurality of different individuals; 
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generating a contrast measure comparing the summary variables of at least two of the 
profiles; and 

training a statistical model generate a score for a transaction, the score indicative of a 
likelihood that the transaction is fraudulent, by using as training inputs to the 
statistical model selected transactions, the profiles associated with the keys of the key 
fields of each selected transaction, and the contrast measures associated with the 
profiles. 

16. The method of claim 15, further comprising: 
setting a cutoff score for rejecting a transaction by: 

determining a desired transaction false positive rate as a function of a net margin; 
selecting the score generated by the statistical model having an actual transaction false 

positive rate substantially similar or identical to the desired transaction false positive 

rate. 

17. The method of claim 16, wherein determining a desired transaction false positive rate 
as a function of a net margin comprises: 

setting the transaction false positive rate TFPR according to the equation: 

T raP= 1 " NrtMargin 
iri ^ Net Margin * 

18. The method of claim 15, wherein generating a contrast measure comprises 
computing a ratio of the summary variables of the at least two profiles. 

19. A computer implemented method of processing an online transaction, the method 
comprising: 

generating from the online transaction of a purchaser, a plurality of keys from key fields 
of the transaction that individually do not reliably identify the purchaser; 
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for each key, retrieving a profile of historical transactions associated with the key, each 

profile including at least one summary variable; 
computing at least one contrast measure for a summary variable included in the set of 

profiles; and 

inputting the contrast measures, the online transaction data and the selected set of profiles 
into a predictive model to generate a fraud score indicative of the likelihood of fraud 
in the online transaction. 

20. The method of claim 19, wherein the key fields of the online transaction includes 
fields associated with any of purchaser identification information, order information, and 
payment information. 

21 . The method of claim 19, wherein each profile for a key includes a plurality of 
summary variables derived from the associated historical transactions, and which summarize the 
historical transactions having the key in a key field of the historical transactions. 

22. The method of claim 1 9, wherein computing at least one contrast measure for a 
summary variable comprises computing a ratio of the summary variables of the profiles. 

23. The method of claim 19, further comprising: 

comparing the fraud score to a plurality of thresholds to determine whether to approve the 

transaction, decline the transaction, obtain more information for the transaction, or 

hold the transaction for further review by a human analyst; 
responsive to determining to approve the transaction, completing the transaction order, 

and fulfilling payment instructions for the online order, and completing the 

transaction; 

responsive to determining to decline the transaction, transmitting to the purchaser/the 
merchant/ a signal indicating that the transaction is declined; 
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responsive to determining to obtain additional information that is necessary to complete 

the transaction, presenting a form with questions selected to obtain the additional 

information from the purchaser; and 
responsive to determining to hold the transaction for further review, outsorting the 

transaction to a file for review by human analyst to determine whether to decline, 

approve or obtain additional information. 

24. The method of claim 23, wherein comparing the fraud score to a plurality of 
thresholds comprises: 

storing velocity data based on an attribute of the transaction, the velocity data measuring 

a frequency of the attribute in a plurality of transactions; and 
applying a velocity rule to the velocity data. 

25. The method of claim 23, wherein comparing the fraud score to a plurality of 
thresholds further comprises: 

for each of a plurality of different product categories, defining a different cutoff score; 
and 

responsive to the product category pertaining to the transaction, applying the cutoff score 
for the product category to the fraud score. 

26. The method of claim 25, wherein determining whether to decline the transaction 
further comprises: 

declining the transaction if the fraud score is below a cutoff score, wherein the cutoff 
score is a function of a net margin of a merchant receiving the transaction. 
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27. The method of claim 26, wherein the cutoff score as a function of a net margin 
comprises: 

setting the cutoff score to be a transaction false positive rate TFPR according to the 

equation: 

^i-^Margin 
Net Margin * 

28. A computer implemented method of processing transactions to statistically identify a 
current purchaser, the method comprising: 

receiving a transaction; 

generating from the transaction a plurality of keys, including keys containing keys that 

individually do not reliably identify the purchaser; 
for each key, retrieving a profile summarizing historical transactions by purchasers whose 

profiles match the key; 
weighting each of the retrieved profiles by a weight indicating the degree to which the 

profile is associated with the current purchaser; 
predicting the likelihood of fraud in the current transaction as a function of the weighted 

profiles and the current transaction. 

29. A computer implemented method of identifying a current purchaser of online 
transaction, the method comprising: 

receiving an online transaction from a current purchaser, the online transaction including 

purchaser identification information; 
generating from the online transaction a plurality of keys that individually do not reliably 

identify the current purchaser; 



88 



for each key, retrieving a profile summarizing a plurality of historical transactions 
associated with the key, each profile including a plurality of summary variables 
derived from the associated historical transactions; and 

selecting as the profiles of the current purchaser the profiles having the most similar 
summary variables. 

30. A system for processing online transactions, the system comprising: 

a rule engine that receives from a scoring system a fraud score associated with a 
transaction, the fraud score indicating the likelihood of fraud in the transaction, 
which applies a plurality of stored rules to the fraud score, each rule providing a 
condition and an action to perform in response to the transaction or the fraud score, to 
determine according to the rules whether to approve or decline the transaction, 
request more information from the purchaser, or hold the transaction for review by a 
human analyst; 

an outsort management workstation that receives from the rule engine transactions to be 
held for review, stores the transactions in queues, and provides access to the queues 
to a human analyst in order to review transactions in the queues, the outsort 
management workstation further adapted to define for each queue at least one criteria 
for associating a transaction with the queue; and 

a policy management workstation adapted to access the stored rules, and define rules for 
the rule engine to apply. 

31. A system for scoring a transaction, the system comprising: 

a plurality of stored profiles, each profile associated with a key for one of a plurality of 
key fields of a transaction, the key fields including at least one key field that does not 
reliably identify a purchaser of a transaction, each profile including summary 
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variables summarizing all transactions having a same key for at least one of the key 
fields; and 

a statistical model that receives as inputs a transaction, a plurality of profiles, each profile 
summarizing transactions associated with a key for a key field, and at least one 
contrast measure that weights selected pairs of the profiles, and that produces a fraud 
score indicating the likelihood of fraud in the transaction. 

32. The system of claim 31, wherein the at least one contrast measure is a ratio of the 
summary variables of a selected pair of profiles. 

33. A method of establishing a cutoff score for a transaction processing system that 
processes transactions of a merchant, the method comprising: 

providing a statistical model that generates a score categorizing a transaction, the score 

used by the merchant to accept or reject the transaction; 
determining for each of a plurality of scores generated by the statistical model an actual 

transaction false positive rate; 
determining a desired transaction false positive rate as a function of the merchant's net 

margin; and 

setting the cutoff score for rejecting transactions as a score having an actual transaction 
false positive rate approximating or equal to the desired transaction false positive 
rate. 

34. The method of claim 33, wherein determining a desired transaction false positive rate 
as a function of the merchant's net margin comprises: 

setting the transaction false positive rate TFPR according to the equation: 

1-Net Margin 
TFRP " Net Margin 

wherein Net Margin is the merchant's net margin. 
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35. A computer implemented system of processing an online transaction, the method 
comprising: 

means for receiving an online transaction from a current purchaser, the online transaction 
including purchaser identification information, order information, and payment 
information; 

means for generating from the online transaction a plurality of keys that individually do 

not reliably identify the current purchaser; 
means for retrieving a profile summarizing a plurality of historical transactions associated 

with the each key; 

means for weighting each profile with a weight indicating a degree to which the profile is 

associated with current purchaser; and 
means for generating a fraud score indicative of the likelihood of fraud in the online 

transaction as a function of the weighted profiles and the current transaction. 

36. A system for developing a statistical model of online transactions, the method 
comprising: 

a database for storing transactions from a plurality of different online merchants, the 
transactions for a plurality of different purchasers, each transaction indicated as being 
fraudulent or non-fraudulent; 

means for generating for each of a plurality of key fields of the transaction-including at 
least one key field for which all of the possible keys of the key field do not reliably 
uniquely identify a purchaser of the transaction--a profile for all of the transactions 
having a matching key for the key field, such that at least one profile summarizes the 
transactions of a plurality of different individuals; 

means for generating a contrast measure comparing the summary variables of at least two 
of the profiles; and 
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means for training a statistical model generate a score for a transaction, the score 

indicative of a likelihood that the transaction is fraudulent, by using as training inputs 
to the statistical model selected transactions, the profiles associated with the keys of 
the key fields of each selected transaction, and the contrast measures associated with 
the profiles. 

37. A system for processing online transactions, the system comprising: 
a rule engine having a function of determining whether to approve a transaction, decline 
the transaction, request more information from the purchaser of the transaction, or 
hold the transaction for review by a human analyst by way of receiving a fraud score 
for the transaction from a scoring system and applying rules to the fraud score, 
wherein each rule defines a condition and an action to perform in response to the 
transaction or the fraud score, to produce a determination for handling the 
transaction; 

an outsort management workstation having a function of queuing transactions to be held 
for review and providing access to the queues to a human analyst in order to review 
transactions in the queues by way of receiving from the rule engine transactions to be 
held for review and storing the transactions in queues, each queue having at least one 
criteria for storing a transaction in the queue, to produce a set of queues, each queue 
storing one or more transactions; and 

a policy management workstation having a function of defining rules for the rule engine 
to apply, by way of providing access to the stored rules. 
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